Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft (raw, json)
Hash identifier: xuImuXmDg7TP3K91Fst+Z77qboHSef8KEvNWwM4y9Ws=
Subject key identifier: 28:76:88:D6:20:84:DC:42:16:64:BE:47:48:A9:70:99:8C:A0:43:72
Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Certificate serial: 01987185B89A82BCBE46A10E761A5933E1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
Manifest number: 1253
Signing time: Sun 03 Aug 2025 20:00:45 +0000
Manifest this update: Sun 03 Aug 2025 20:00:45 +0000
Manifest next update: Mon 04 Aug 2025 20:00:45 +0000
Files and hashes: 1: DLK7aUuoCrkixmfK1Tr6lgYywbs.roa (hash: P1mAikX7/iUCIq0Iyy8fvjfAyIPndaCCAY0oESDv+Qo=)
2: mxU7ZGuWRrVnoU7neP0ntyKL78s.roa (hash: X4Bp+WOWNCY8+u0/f19L8Y2SQKOHLXJCsrOK+p7unk8=)
3: sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl (hash: S818ctBF7Lh6ODLGt78C6uk/WV4V1c6qrG+QoSBPsR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:71:85:b8:9a:82:bc:be:46:a1:0e:76:1a:59:33:e1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Validity
Not Before: Aug 3 20:00:45 2025 GMT
Not After : Aug 4 20:00:45 2025 GMT
Subject: CN=287688d62084dc421664be4748a970998ca04372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:b7:5e:14:52:71:02:5e:6a:5b:4b:8a:54:
64:61:1b:ed:ad:55:ad:7f:1b:33:a0:d2:9e:ac:c2:
44:96:40:14:7a:46:ae:4b:fe:44:02:f5:58:75:a0:
38:d4:9f:33:f1:7d:c3:b2:23:fa:e3:df:f7:b3:e5:
22:ac:c7:93:4c:26:f3:9f:0c:a9:0c:28:a3:39:b2:
9f:c1:ec:9e:5b:34:e8:c2:99:58:c2:64:1d:af:e7:
e7:e5:ea:f2:74:e3:95:0e:a7:e1:b0:02:3d:6c:95:
c1:89:e4:4f:11:2a:3a:af:b1:4c:d5:13:75:f2:19:
59:61:26:ea:f5:b4:9a:c0:2c:5f:94:4f:d4:e3:10:
24:de:5a:61:ba:0a:04:14:4a:d3:3a:87:d4:81:3a:
6e:d4:90:6e:db:bc:80:20:da:3b:c5:c0:9c:44:51:
2b:29:36:a3:b4:4f:4d:88:45:e0:69:7b:e3:3c:4a:
53:34:d8:b0:18:18:8e:38:c5:59:3c:95:8b:ac:1c:
00:52:f3:07:fe:cc:9a:1a:3c:22:47:b6:20:79:0c:
d0:8c:99:0d:a5:51:28:1a:83:63:e0:01:2f:ef:68:
d5:16:a9:70:ea:40:68:42:e3:c4:7f:b4:15:59:f4:
b6:f8:22:fa:a5:9c:09:7b:80:0d:ad:c4:03:bf:99:
2d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:76:88:D6:20:84:DC:42:16:64:BE:47:48:A9:70:99:8C:A0:43:72
X509v3 Authority Key Identifier:
keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:73:d6:19:46:40:43:0f:c7:48:22:fc:b8:ba:18:94:70:1a:
73:26:09:b5:77:a4:a9:0d:7f:e1:11:1a:08:77:91:81:51:bf:
8f:93:48:dc:aa:24:bc:05:40:8e:50:eb:61:af:07:82:c9:9e:
0c:ca:97:78:d0:0d:33:3a:3a:92:8a:aa:b2:7a:89:18:66:d5:
38:b1:d7:f7:3c:fb:25:bf:3c:1e:be:1a:16:60:20:63:fe:a1:
b4:e1:94:d4:2f:ff:f6:b2:bc:e9:75:52:a3:35:28:7f:5f:74:
19:1a:3c:0b:e1:b0:04:03:6d:bb:f8:0c:80:f8:5b:31:03:7f:
d1:d9:ab:80:c6:ce:71:a6:21:4f:d5:7c:9c:77:0f:ed:9d:0b:
5a:00:3f:19:e2:33:41:e2:8d:d8:e0:d2:50:9b:ed:36:21:f3:
f1:a9:c0:55:0f:98:f0:5d:83:db:ef:69:9f:6d:3e:fc:a0:d5:
8c:29:9c:4b:1f:58:d3:cb:78:2c:e2:0c:6d:57:6a:61:53:c9:
e9:3c:19:43:4d:23:49:6c:90:d2:79:ab:8d:36:1f:b9:c5:29:
29:09:16:6d:aa:d0:aa:06:41:a2:cc:62:64:97:a7:66:c2:2b:
a8:59:b1:62:03:ba:99:61:d9:5c:56:e7:23:a0:c5:2a:1d:02:
62:16:b4:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhxhbiagry+RqEOdhpZM+HJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMzJlOTM1YTEwZjljZTIxNmUwOTkzYWU0MTk5Yzk2ZjUy
NzNhZjQwHhcNMjUwODAzMjAwMDQ1WhcNMjUwODA0MjAwMDQ1WjAzMTEwLwYDVQQD
EygyODc2ODhkNjIwODRkYzQyMTY2NGJlNDc0OGE5NzA5OThjYTA0MzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrq3XhRScQJealtLilRkYRvtrVWt
fxszoNKerMJElkAUekauS/5EAvVYdaA41J8z8X3DsiP649/3s+UirMeTTCbznwyp
DCijObKfweyeWzTowplYwmQdr+fn5erydOOVDqfhsAI9bJXBieRPESo6r7FM1RN1
8hlZYSbq9bSawCxflE/U4xAk3lphugoEFErTOofUgTpu1JBu27yAINo7xcCcRFEr
KTajtE9NiEXgaXvjPEpTNNiwGBiOOMVZPJWLrBwAUvMH/syaGjwiR7YgeQzQjJkN
pVEoGoNj4AEv72jVFqlw6kBoQuPEf7QVWfS2+CL6pZwJe4ANrcQDv5kt8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCh2iNYghNxCFmS+R0ipcJmMoENyMB8GA1UdIwQY
MBaAFLEy6TWhD5ziFuCZOuQZnJb1Jzr0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1RMcE5hRVBuT0lXNEprNjVCbWNsdlVuT3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iMzg4MjEtMjNmMi00ZTVlLTk0MWMt
YThmMGVlMDBiMmFkLzEvc1RMcE5hRVBuT0lXNEprNjVCbWNsdlVuT3ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iMzg4MjEtMjNmMi00ZTVlLTk0MWMtYThmMGVlMDBiMmFk
LzEvc1RMcE5hRVBuT0lXNEprNjVCbWNsdlVuT3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXPWGUZA
Qw/HSCL8uLoYlHAacyYJtXekqQ1/4REaCHeRgVG/j5NI3KokvAVAjlDrYa8Hgsme
DMqXeNANMzo6koqqsnqJGGbVOLHX9zz7Jb88Hr4aFmAgY/6htOGU1C//9rK86XVS
ozUof190GRo8C+GwBANtu/gMgPhbMQN/0dmrgMbOcaYhT9V8nHcP7Z0LWgA/GeIz
QeKN2ODSUJvtNiHz8anAVQ+Y8F2D2+9pn20+/KDVjCmcSx9Y08t4LOIMbVdqYVPJ
6TwZQ00jSWyQ0nmrjTYfucUpKQkWbarQqgZBosxiZJenZsIrqFmxYgO6mWHZXFbn
I6DFKh0CYha0qw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 03:24:03 2025 by rpki-client